a980c2682dd59a1413ff101c7bce0969_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a980c2682dd59a1413ff101c7bce0969_JaffaCakes118
Size

10KB
MD5

a980c2682dd59a1413ff101c7bce0969
SHA1

8a593be7d5d2fd6a5dba9233f7e643ebfe20a468
SHA256

75a77c11c017268b7f10f82029f2361579352f8735065d3ae1341c565ebff2ca
SHA512

fdd753cdce639c78dedc93f6376d15026cfc7116d6799f9e9aec04c5d633429b10ec5cb736c26bc2c4a34ffb899b59539c60dedcb423992699f6764474fc0c7b
SSDEEP

96:iBQF2Q9r5IlivJkwVBbPRQpndcZUVDlMp33TjdrgffHsKilJOQGJ6UgxzCyJ:iW2QPIcJTrRe+ZUVDlMH5svcOXq9h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a980c2682dd59a1413ff101c7bce0969_JaffaCakes118

Files

a980c2682dd59a1413ff101c7bce0969_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0937741ef5bb6775f0ee209bdfab07a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
CreateDirectoryA
GetModuleHandleA
ExitProcess

user32

PostQuitMessage
LoadIconA
MessageBoxA
DefDlgProcA
EnableWindow
GetWindowTextA
RegisterClassA
CreateDialogParamA
SetWindowTextA
GetDlgItem
SetDlgItemTextA
SendMessageA
GetWindowLongA
SetWindowLongA
ShowWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CallWindowProcA
DestroyWindow

advapi32

RegCloseKey
RegFlushKey
RegSetValueExA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegCreateKeyExA
RegQueryValueExA

msvcrt

__mb_cur_max
strncpy
strncat
_pctype
_isctype

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ